WHAT IS CLAIMED IS: 



1 . A method for loading an executable program and associated modification 
code segments, the method comprising the steps of: 

5 receiving a set of original program segments referenced by the executable 

program; 

identifying a set of substitute program segments associated with ones of the 
original set of program segments; 

modifying the ones of the original set of program segments to include an 
10 exception inducing code; and 

creating an association between ones of the set of original program segments and 
ones of the set of substitute program segments. 

2. The method of claim 1 further comprising determining a condition under 
15 which a particular substitute program segment will not be executed in place of an 

associated original program segment. 

3 . The method of claim 1 wherein the substitute program segments comprise 
functions. 

20 

4. The method of claim 3 wherein the functions comprise application 
program interfaces. 

5 . The method of claim 4 wherein the application program interfaces are part 
25 of an operating system. 

6. The method of claim 1 wherein the creating an association step comprises 
building a table entry including a called original program segment reference and a 
substitute program segment reference. 

30 



31 



7. The method of claim 6 wherein the called original program segment 
reference comprises an address. 

8. The method of claim 6 further comprising storing a portion of the original 
5 program segment replaced by the exception inducing code in table entry. 

9. The method of claim 6 further comprising storing a condition description 
specifying a program execution state under which a substitute program segment will not 
be executed in place of an associated called original program segment. 

10 

10. The method of claim 1 wherein the identifying step comprises searching a 
program modification database including a set of identified programs and corresponding 
substitute program segments. 

15 11. The method of claim 1 further comprising the steps of: 

loading an executable program into active process space; 

identifying an in-memory patch within the program modification database 
corresponding to the executable program; and 

inserting an in-memory patch within the executable program residing in the active 
20 process space. 

12. A method for loading an executable program having associated 
modification code segments, the method comprising the steps of: 

loading, for execution, a copy of the executable program in active process space; 
25 identifying a set of modifications corresponding to the executable program; and 

modifying the copy of the executable program in active process space to include 
an exception inducing code, wherein the exception inducing code initiates execution of a 
handling routine for determining and executing at least a corresponding one of the set of 
modifications. 
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13. A method for implementing execution of substitute program segments 
associated with an active executable program, wherein the active executable program has 
been modified to include exception inducing code, the method comprising the steps of: 

detecting an instance of the exception inducing code; 
5 first determining a corresponding substitute program segment entry in a program 

segment substitution list; and 

executing a substitute program segment associated with the corresponding 
substitute program segment in place of an original program segment associated with the 
exception inducing code. 

10 

14. The method of claim 13 further comprising second determining, by 
reference to an exclusion/inclusion policy associated with the instance of the exception 
inducing code, whether to perform the substitute program segment in place of the original 
program segment, wherein the exclusion/inclusion policy identifies at least a condition 

15 under which the corresponding substitute program segment will not be executed in place 
of an associated original program segment. 

15. The method of claim 14 wherein the corresponding substitute program 
segment entry includes a portion of the original program segment replaced by the 

20 exception inducing code, and further comprising the step of determining that the 
condition under which the corresponding substitute program segment will not be 
executed has been fulfilled, and in response restoring within a program code execution 
stream the portion of the original program segment replaced by the exception inducing 
code. 

25 

1 6 . The method of claim 1 3 wherein the substitute program segments 
comprise functions. 

17. The method of claim 16 wherein the functions comprise application 
30 program interfaces. 
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1 8 . The method of claim 1 7 wherein the application program interfaces are 
part of an operating system. 

19. The method of claim 1 3 wherein the corresponding substitute program 
segment entry includes a called original program segment reference and a substitute 
program segment reference. 
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20. A computer-readable medium having computer-executable instructions for 
facilitating loading an executable program and associated modification code segments, 
the computer-executable instructions facilitating performing the steps of: 

receiving a set of original program segments referenced by the executable 
program; 

identifying a set of substitute program segments associated with ones of the 
original set of program segments; 

modifying the ones of the original set of program segments to include an 
exception inducing code; and 

creating an association between ones of the set of original program segments and 
ones of the set of substitute program segments. 

2 1 . The computer-readable medium of claim 20 further comprising computer- 
executable instructions facilitating: 

determining a condition under which a particular substitute program segment will 
not be executed in place of an associated original program segment. 

22. The computer-readable medium of claim 20 wherein the substitute 
program segments comprise functions. 

23 . The computer-readable medium of claim 22 wherein the functions 
comprise application program interfaces. 

24. The computer-readable medium of claim 23 wherein the application 
program interfaces are part of an operating system. 

25. The computer-readable medium of claim 20 wherein the creating an 
association step comprises building a table entry including a called original program 
segment reference and a substitute program segment reference. 
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26. The computer-readable medium of claim 25 wherein the called original 
program segment reference comprises an address. 

27. The computer-readable medium of claim 25 further comprising computer- 
executable instructions facilitating: 

storing a portion of the original program segment replaced by the exception 
inducing code in table entry. 

2 8 . The method of claim 25 further comprising computer-executable 
instructions facilitating: 

storing a condition description specifying a program execution state under which 
a substitute program segment will not be executed in place of an associated called 
original program segment. 

29. The computer-readable medium of claim 20 wherein the identifying step 
comprises searching a program modification database including a set of identified 
programs and corresponding substitute program segments. 

30. The computer-readable medium of claim 20 further comprising computer- 
executable instructions facilitating: 

loading an executable program into active process space; 

identifying an in-memory patch within the program modification database 
corresponding to the executable program; and 

inserting an in-memory patch within the executable program residing in the active 
process space. 
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31. A computer-readable medium having computer-executable instructions for 
facilitating implementing execution of substitute program segments associated with an 
active executable program, wherein the active executable program has been modified to 
include exception inducing code, the computer-executable instructions facilitating 
performing the steps of: 

detecting an instance of the exception inducing code; 

first determining a corresponding substitute program segment entry in a program 
segment substitution list; and 

executing a substitute program segment associated with the corresponding 
substitute program segment in place of an original program segment associated with the 
exception inducing code. 

32. The computer-readable medium of claim 3 1 further comprising computer- 
executable instructions facilitating: 

second determining, by reference to an exclusion/inclusion policy associated with 
the instance of the exception inducing code, whether to perform the substitute program 
segment in place of the original program segment, wherein the exclusion/inclusion policy 
identifies at least a condition under which the corresponding substitute program segment 
will not be executed in place of an associated original program segment. 

33 . The computer-readable medium of claim 32 wherein the corresponding 
substitute program segment entry includes a portion of the original program segment 
replaced by the exception inducing code, and further comprising computer-executable 
instructions facilitating: 

determining that the condition under which the corresponding substitute program 
segment will not be executed has been fulfilled, and in response restoring within a 
program code execution stream the portion of the original program segment replaced by 
the exception inducing code. 

34. The computer-readable medium of claim 32 wherein the substitute 
program segments comprise functions. 
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3 5 . The computer-readable medium of claim 34 wherein the functions 
comprise application program interfaces. 

36. The computer-readable medium of claim 35 wherein the application 
program interfaces are part of an operating system. 

3 7 . The computer-readable medium of claim 3 1 wherein the corresponding 
substitute program segment entry includes a called original program segment reference 
and a substitute program segment reference. 
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38. A program execution system facilitating modifying an executable 
program, including a set of original program segments referenced by the executable 
program, the program execution system comprising: 

a program modification database for storing a set of substitute program segments 
associated with ones of the original set of program segments; 

a program loader for installing a copy of the executable program into an active 
process space; 

a program code modifier for altering, within the active process space, the ones of 
the original set of program segments to include an exception inducing code; and 

a substitution list including entries describing an association between ones of the 
set of original program segments and ones of the set of substitute program segments. 

39. The program execution system of claim 38 wherein the substitution list 
further comprises a policy description identifying a condition under which a particular 
substitute program segment will not be executed in place of an associated original 
program segment. 

40. The program execution system of claim 38 wherein the substitute program 
segments comprise functions. 

4 1 . The program execution system of claim 40 wherein the functions comprise 
application program interfaces. 

42. The program execution system of claim 41 wherein the application 
program interfaces are part of an operating system. 

43 . The program execution system of claim 38 wherein individual entries 
within the substitution list included a called original program segment reference and a 
substitute program segment reference. 
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44. The program execution system of claim 43 wherein individual entries 
within the substitution list include a portion of the original program segment replaced by 
the exception inducing code. 

45. The program execution system of claim 38 further comprising: 

an in-memory patch within the program modification database corresponding to 
the executable program; and 

an in-memory patching function for inserting the in-memory patch within the 
executable program residing in the active process space. 
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